| Package | Affected versions | Patched versions |
|---|---|---|
| org.wildfly.security:wildfly-elytron | ≥ 1.11.0, < 1.15.5≥ 1.16.0, < 1.16.1< 1.10.14 | 1.15.51.16.11.10.14 |
| quarkus | ≤ 2.1.4 | |
| codeready studio | = 12.0 | |
| data grid | = 8.0 | |
| descision manager | = 7.0 | |
| jboss enterprise application platform | = 7.0.0 | |
| jboss fuse | = 7.0.0 | |
| process automation | = 7.0 | |
| wildfly elytron | ≥ 1.11.0, < 1.15.5≥ 1.16.0, < 1.16.1< 1.10.14 | 1.15.51.16.11.10.14 |
A flaw was found in Wildfly Elytron where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality. This flaw affectes Wildfly Elytron versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free